Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/34352e3232382e3232312e302f32342d3234203d3e20323636363834.roa
File:                     34352e3232382e3232312e302f32342d3234203d3e20323636363834.roa (raw, json)
Hash identifier:          4/35MzW0mVFmAeqZdgVyY7kRmifRZ1WDVS2T8Btm0Tw=
Subject key identifier:   37:D1:A9:CF:B3:2C:94:06:96:5E:91:DE:BB:3F:DC:9B:13:F7:29:D1
Certificate issuer:       /CN=637F3C6F4A4FAEC438B0EA735882742F9E106F8B
Certificate serial:       448F84EF0357041173CADAEF4C9D8C9E8F2CD401
Authority key identifier: 63:7F:3C:6F:4A:4F:AE:C4:38:B0:EA:73:58:82:74:2F:9E:10:6F:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/34352e3232382e3232312e302f32342d3234203d3e20323636363834.roa
Signing time:             Tue 06 Jan 2026 19:38:27 +0000
ROA not before:           Tue 06 Jan 2026 19:33:27 +0000
ROA not after:            Tue 05 Jan 2027 19:38:27 +0000
asID:                     266684
IP address blocks:        45.228.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:8f:84:ef:03:57:04:11:73:ca:da:ef:4c:9d:8c:9e:8f:2c:d4:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=637F3C6F4A4FAEC438B0EA735882742F9E106F8B
        Validity
            Not Before: Jan  6 19:33:27 2026 GMT
            Not After : Jan  5 19:38:27 2027 GMT
        Subject: CN=37D1A9CFB32C9406965E91DEBB3FDC9B13F729D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f5:0b:1a:16:9a:56:ba:4a:d9:59:f3:b6:b3:
                    2a:8b:0b:65:5f:5f:98:c6:7b:a5:ed:2f:f9:29:c7:
                    0c:79:98:b5:d4:7d:46:51:86:67:e3:69:93:71:88:
                    a7:2a:1f:83:40:97:1f:0a:ba:42:56:2a:82:7e:7d:
                    8d:08:64:e5:a2:ac:a5:09:f5:d1:77:b5:00:ea:d9:
                    6a:5e:d0:da:bc:ef:7d:45:00:1a:74:bf:ad:40:9a:
                    af:d6:f8:77:0c:64:b7:98:a9:35:4e:79:17:ba:11:
                    4f:1a:c0:8e:6d:50:72:4d:17:b2:b5:06:f6:73:35:
                    4e:da:bb:ca:1a:b9:10:7c:f9:0a:34:e1:2d:42:a8:
                    fa:ea:75:ce:ff:6a:43:e7:bc:74:9a:f3:3c:ab:3e:
                    0b:82:08:0c:64:cd:f1:65:b8:19:16:db:da:61:45:
                    b1:34:1f:3a:2b:31:91:12:02:1e:e5:ec:7b:28:fa:
                    12:20:f2:1c:e0:f9:37:75:34:74:55:f7:26:bd:08:
                    59:89:fa:c3:03:1a:f6:8d:f5:17:c5:d1:62:1a:6f:
                    43:67:e2:85:df:72:a6:72:5c:2f:ef:d5:e4:3d:8d:
                    4a:66:74:2c:1c:8c:47:95:48:9b:46:1b:83:74:12:
                    a8:21:71:44:ae:e1:9b:e0:d0:e7:c6:67:76:15:74:
                    4a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D1:A9:CF:B3:2C:94:06:96:5E:91:DE:BB:3F:DC:9B:13:F7:29:D1
            X509v3 Authority Key Identifier:
                keyid:63:7F:3C:6F:4A:4F:AE:C4:38:B0:EA:73:58:82:74:2F:9E:10:6F:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/34352e3232382e3232312e302f32342d3234203d3e20323636363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:73:81:35:ac:78:ee:52:df:fe:e1:9f:71:1d:6b:be:83:2a:
         b6:a0:21:a8:9e:96:5d:c7:4a:a6:97:0f:23:03:39:d7:24:5b:
         45:3c:9e:13:4a:38:bc:67:f8:cf:8a:d2:b3:15:bf:b8:89:34:
         f7:d6:6c:bf:6f:fd:fd:38:16:45:2c:69:c4:41:60:53:fe:45:
         eb:d3:c8:bf:a2:69:c4:3c:a0:77:42:91:df:2b:59:94:a8:8d:
         24:dd:17:f4:64:8a:ff:69:53:ff:e6:5e:ed:c2:58:d4:c2:33:
         0d:60:74:1c:52:83:7f:26:c2:e7:c7:b9:e3:8a:0f:45:33:83:
         50:d6:ef:72:ac:6e:34:d3:4c:78:e3:e1:c4:99:4d:67:f8:ba:
         c3:31:cf:9d:39:37:3a:f5:97:ab:fb:08:31:3b:1b:82:c3:b4:
         60:d2:1f:7d:d1:d7:27:a2:11:1b:ee:30:e8:c3:f1:f0:5c:2b:
         b9:8d:07:5f:86:e4:27:cc:c1:99:26:42:91:e9:b4:55:ee:31:
         46:cd:df:53:82:89:86:1b:85:05:95:4a:2d:ee:75:52:7e:cf:
         f4:ab:33:3e:5b:24:f2:d9:e7:b5:4e:82:46:61:83:40:5b:39:
         23:1d:98:b0:0f:51:d1:b6:c8:84:c4:34:4a:45:f0:47:83:10:
         dd:a8:f1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:01:00 2026 by rpki-client